Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2024-49862

powercap: intel_rapl: Fix off by one in get_rpi()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: powercap: intel_rapl: Fix off by one in get_rpi() The rp->priv->rpi array is either rpi_msr or rpi_tpmi which have NR_RAPL_PRIMITIVES number of elements. Thus the > needs to be >= to prevent an off by one access.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 98ff639a7289067247b3ef9dd5d1e922361e7365 to < 288cbc505e2046638c615c36357cb78bc9fee1e0affected
  • 98ff639a7289067247b3ef9dd5d1e922361e7365 to < 851e7f7f14a15f4e47b7d0f70d5c4a2b95b824d6affected
  • 98ff639a7289067247b3ef9dd5d1e922361e7365 to < 6a34f3b0d7f11fb6ed72da315fd2360abd9c0737affected
  • 98ff639a7289067247b3ef9dd5d1e922361e7365 to < 95f6580352a7225e619551febb83595bcb77ab17affected

Linux Linux

Default version status: affected

  • 6.5affected
  • 0 to < 6.5unaffected
  • 6.6.54 to ≤ 6.6.*unaffected
  • 6.10.13 to ≤ 6.10.*unaffected
  • 6.11.2 to ≤ 6.11.*unaffected
  • 6.12 to ≤ *unaffected

References